PT-2023-22376 · Unknown · Bt21 X Bts Wallpaper

Name of the Vulnerable Software and Affected Versions: BT21 x BTS Wallpaper app version 12 Description: The issue allows unauthorized apps to request permission to modify data in the database that records user personal preferences. This data is loaded into memory when the app is opened, and an...

CVE-2023-29722

The Glitter Unicorn Wallpaper app for Android 7.0 thru 8.0 allows unauthorized apps to actively request permission to modify data in the database that records information about a user's personal preferences and will be loaded into memory to be read and used when the app is opened. An attacker cou...

PT-2023-22375 · Google · Android

Name of the Vulnerable Software and Affected Versions: Glitter Unicorn Wallpaper app for Android versions 7.0 through 8.0 Description: The issue allows unauthorized applications to inject data into the database that stores user personal preferences, which can be loaded into memory and used when t...

Sql injection

Gentoo soko is the code that powers packages.gentoo.org. Versions prior to 1.0.1 are vulnerable to SQL Injection, leading to a Denial of Service. If the user selects in user preferences the "Recently Visited Packages" view for the index page, the value of the searchhistory cookie is used as a...

SUSE CVE-2017-2641

In Moodle 2.x and 3.x, SQL injection can occur via user preferences...

SUSE CVE-2017-2642

Moodle 3.x has user fullname disclosure on the user preferences page...

GHSA-9X9J-VRHJ-V364 Apache JSPWiki CSRF due to crafted request on UserPreferences.jsp

A carefully crafted request on UserPreferences.jsp could trigger an CSRF vulnerability on Apache JSPWiki before 2.11.3, which could allow the attacker to modify the email associated with the attacked account, and then a reset password request from the login page...

CVE-2022-28731

A carefully crafted request on UserPreferences.jsp could trigger an CSRF vulnerability on Apache JSPWiki before 2.11.3, which could allow the attacker to modify the email associated with the attacked account, and then a reset password request from the login page...

Malicious code in wix-user-preferences-webapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29e4630a25b98ef601b67373c19a7e895e64e5c6ce1ae6cb9fdbafa41d101036 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7177 Malicious code in wix-user-preferences-webapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29e4630a25b98ef601b67373c19a7e895e64e5c6ce1ae6cb9fdbafa41d101036 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-54R2-R67G-FR9M Moodle User fullname disclosure on user preferences page

Moodle 3.x has user fullname disclosure on the user preferences page...

Moodle User fullname disclosure on user preferences page

Moodle 3.x has user fullname disclosure on the user preferences page...

GHSA-XHQ3-455R-XV44 Moodle SQL injection via user preferences

In Moodle 2.x and 3.x, SQL injection can occur via user preferences...

Moodle SQL injection via user preferences

In Moodle 2.x and 3.x, SQL injection can occur via user preferences...

Cross-site Request Forgery (CSRF)

Apache JSPWiki is vulnerable to cross-site request forgery. A lack of secure password management to validate password change flow causes a vulnerability in user preferences form, allowing an attacker to trigger CSRF attacks which may lead to account takeover...

GHSA-4284-X26R-4HHC Cross Site Request Forgery in Apache JSPWiki

Apache JSPWiki user preferences form is vulnerable to CSRF attacks, which can lead to account takeover. Apache JSPWiki users should upgrade to 2.11.2 or later...

GHSA-9953-FMRW-V4VM Cross-site Scripting in Apache JSPWiki

A carefully crafted user preferences for submission could trigger an XSS vulnerability on Apache JSPWiki, related to the user preferences screen, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users...

Cross-site Scripting in Apache JSPWiki

A carefully crafted user preferences for submission could trigger an XSS vulnerability on Apache JSPWiki, related to the user preferences screen, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users...

Cross Site Request Forgery in Apache JSPWiki

Apache JSPWiki user preferences form is vulnerable to CSRF attacks, which can lead to account takeover. Apache JSPWiki users should upgrade to 2.11.2 or later...

CVE-2022-24948

A carefully crafted user preferences for submission could trigger an XSS vulnerability on Apache JSPWiki, related to the user preferences screen, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users...